当前位置: X-MOL 学术J. Cloud Comp. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Experts reviews of a cloud forensic readiness framework for organizations
Journal of Cloud Computing ( IF 3.418 ) Pub Date : 2019-08-14 , DOI: 10.1186/s13677-019-0133-z
Ahmed Alenezi , Hany F. Atlam , Gary B. Wills

Cloud computing has drastically altered the ways in which it is possible to deliver information technologies (ITs) to consumers as a service. In addition, the concept has given rise to multiple benefits for consumers and organizations. However, such a fast surge in the adoption of cloud computing has led to the emergence of the cloud as a new cybercrime environment, thus giving rise to fresh legal, technical and organizational challenges. In addition to the vast number of attacks that have had an impact on cloud computing and the fact that cloud-based data processing is carried out in a decentralized manner, many other concerns have been noted. Among these concerns are how to conduct a thorough digital investigation in cloud environments and how to be prepared to gather data ahead of time before the occurrence of an incident; indeed, this kind of preparation would reduce the amount of money, time and effort that is expended. As a number of cloud forensics challenges have not received enough attention, this study is motivated by a particular gap in research on the technical, legal and organizational factors that facilitate forensic readiness in organizations that utilize an Infrastructure as a Service (IaaS) model. This paper presents a framework with which to investigate the factors that facilitate the forensic readiness of organizations. This framework was identified by critically reviewing previous studies in the literature and by performing an in-depth examination of the relevant industrial standards. The factors were comprehensively studied and extracted from the literature; then, the factors were analysed, duplicates were removed, and the factors were categorized and synthesized to produce the framework. To obtain reliable results, the research method involved two steps: a literature review, followed by expert reviews. These techniques help us paint a comprehensive picture of the research topic and validate and confirm the results.

中文翻译:

专家对组织的云法证准备框架的评论

云计算已彻底改变了将信息技术(IT)交付给消费者即服务的方式。此外,该概念还为消费者和组织带来了多种好处。但是,云计算采用的快速增长导致云作为一种新的网络犯罪环境出现,从而带来了新的法律,技术和组织挑战。除了对云计算产生影响的大量攻击,以及基于云的数据处理以分散方式进行的事实之外,还注意到了许多其他问题。这些问题包括如何在云环境中进行全面的数字调查,以及如何做好准备在事件发生之前提前收集数据;确实,这种准备将减少花费的金钱,时间和精力。由于许多云取证挑战尚未引起足够的重视,因此本研究受到技术,法律和组织因素方面的研究空白的推动,这些因素促进了利用基础架构即服务(IaaS)模型的组织的法医准备工作。本文提供了一个框架,可用来调查有助于组织取证准备就绪的因素。通过严格审查文献中的先前研究并通过对相关工业标准进行深入检查来确定此框架。对这些因素进行了综合研究并从文献中提取出来;然后,分析这些因素,删除重复项,然后对因素进行分类和综合以产生框架。为了获得可靠的结果,研究方法包括两个步骤:文献综述,然后是专家综述。这些技术可帮助我们描绘研究主题的全面情况,并验证和确认结果。
更新日期:2020-04-16
down
wechat
bug